$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json) Hash identifier: hs1eNNh7ISDbv2a/5yTn/bNsJdNKHbUpudfloe9WxbM= Subject key identifier: A8:D1:92:A8:F3:6D:EE:73:EA:A4:2A:87:D2:B4:01:6E:91:D1:C6:E5 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584CB551D57E321F5723FE256F40 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 33208 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d5:7e:32:1f:57:23:fe:25:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=7f39962a-961a-4565-8ef9-c0c6d55b289f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:16:44:36:33:91:d6:90:e5:1c:49:1f:55: ee:6d:1b:2d:71:e2:0a:db:16:00:65:79:34:4b:1b: c3:84:21:0e:82:90:64:28:fe:99:50:45:c1:d0:d4: d1:9f:93:3a:44:68:ce:79:56:cf:ca:78:d8:a7:18: 47:c4:ed:2b:05:f2:62:e0:48:5d:d1:31:75:44:5f: 36:4a:76:34:77:1a:77:fd:16:1d:e6:d2:b4:25:80: 6d:5d:75:53:a1:ed:90:b6:cd:b5:6e:65:41:27:a7: 39:71:be:34:90:92:6b:f3:90:be:d0:dc:6e:f7:78: 73:a4:85:45:e9:45:b0:ac:34:27:d1:37:92:92:31: e7:4f:91:60:48:d2:78:27:6b:a2:1b:75:c7:0e:a8: dd:f0:29:c5:81:cf:34:5b:8f:91:af:f0:96:4c:93: 7c:26:ca:fc:05:0c:37:5e:0f:90:71:bb:70:62:e4: a3:6d:9c:9c:1a:ff:37:67:fa:cb:9f:8f:9f:a5:89: 43:e1:55:fc:9e:bb:d3:7b:e6:b4:51:2a:55:c9:f6: e7:fa:30:a1:c1:94:1c:a7:a2:f8:30:42:2e:31:ca: cc:c7:f0:99:17:4d:ff:66:e2:01:ca:ee:93:ba:0a: bd:79:2e:4d:4f:d0:4d:be:71:b1:b9:ef:ef:26:0c: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:92:A8:F3:6D:EE:73:EA:A4:2A:87:D2:B4:01:6E:91:D1:C6:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:4a:76:88:ac:83:f4:f6:4d:38:ab:79:97:ba:c6:3c:17: 63:22:71:9c:89:d4:61:e2:ae:e0:b8:3e:76:23:8d:c2:20:24: 1c:c0:f4:3e:23:b6:c7:1a:c1:45:21:9e:67:a7:a8:7d:2c:a3: 03:32:12:1b:42:db:85:5f:95:ef:49:c3:bd:63:46:74:25:15: 31:a5:f1:c1:c3:c7:50:93:57:80:21:6f:e3:f6:9d:66:79:55: b9:62:83:dc:c1:40:19:36:1a:2d:02:70:9b:8e:6c:9c:27:b9: dd:e1:42:4c:83:84:a3:1b:d7:2b:a3:15:a0:af:ae:fe:74:8f: 9a:76:5d:fe:de:c9:36:a0:e5:20:e3:a4:c6:ea:21:b3:99:cc: 53:47:c1:de:36:59:eb:d9:71:80:11:c5:56:59:e9:b1:70:74: e4:a0:fc:ee:4c:95:84:7b:ec:a8:28:86:25:32:64:77:b6:65: 63:fe:83:8a:bd:67:98:93:a6:11:9c:dd:17:20:20:e7:94:6d: 2a:21:42:28:cd:2c:f2:94:15:df:41:6d:8e:d8:77:a2:b4:d8: ef:3f:03:8a:a1:cb:86:2c:03:7c:24:39:8b:12:94:57:3b:da: c1:34:96:36:aa:7d:e2:54:32:f0:92:ad:34:a0:30:07:3c:ca: 7b:46:21:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdV+Mh9XI/4lb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk N2YzOTk2MmEtOTYxYS00NTY1LThlZjktYzBjNmQ1NWIyODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjkWRDYzkdaQ5RxJH1XubRstceIK2xYAZXk0 SxvDhCEOgpBkKP6ZUEXB0NTRn5M6RGjOeVbPynjYpxhHxO0rBfJi4Ehd0TF1RF82 SnY0dxp3/RYd5tK0JYBtXXVToe2Qts21bmVBJ6c5cb40kJJr85C+0Nxu93hzpIVF 6UWwrDQn0TeSkjHnT5FgSNJ4J2uiG3XHDqjd8CnFgc80W4+Rr/CWTJN8Jsr8BQw3 Xg+QcbtwYuSjbZycGv83Z/rLn4+fpYlD4VX8nrvTe+a0USpVyfbn+jChwZQcp6L4 MEIuMcrMx/CZF03/ZuIByu6Tugq9eS5NT9BNvnGxue/vJgx79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjRkqjzbe5z6qQqh9K0AW6R0cblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYjRlNzgwNzgtYTQ0My0z ZWRjLTlkYmEtZDMzMzE1YjY3YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYSnaIrIP09k04q3mXusY8F2MicZyJ1GHiruC4PnYjjcIgJBzA9D4j tscawUUhnmenqH0sowMyEhtC24Vfle9Jw71jRnQlFTGl8cHDx1CTV4Ahb+P2nWZ5 Vblig9zBQBk2Gi0CcJuObJwnud3hQkyDhKMb1yujFaCvrv50j5p2Xf7eyTag5SDj pMbqIbOZzFNHwd42WevZcYARxVZZ6bFwdOSg/O5MlYR77KgohiUyZHe2ZWP+g4q9 Z5iTphGc3RcgIOeUbSohQijNLPKUFd9BbY7Yd6K02O8/A4qhy4YsA3wkOYsSlFc7 2sE0ljaqfeJUMvCSrTSgMAc8yntGIUo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:03:45 2026 by rpki-client